Made with ssh-keygen -s and read with ssh-keygen -L. Servers trust the CA via TrustedUserCAKeys. Unlike x509 there is no chain.
SSH certificate
A public key signed by a CA key, with principals and a validity period, instead of a list of raw keys.
Made with ssh-keygen -s and read with ssh-keygen -L. Servers trust the CA via TrustedUserCAKeys. Unlike x509 there is no chain.